Cyber Security Specialist - Privileged Access Management

You will work in a global, complex, and security-critical environment, ensuring secure and compliant privileged access across on-premise and cloud systems, while contributing to BASF’s transition towards Zero Trust and modern identity architectures., * Implement, operate and support Privileged Access Management (PAM) solutions and related security services

• Administer and maintain key security platforms such as:
• Privileged Access Management or Endpoint Privilege Management (e.g., CyberArk or equivalent)
• Secure access components (e.g., SSH Jump Servers, credential vaults)
• Support the end-to-end lifecycle of security platforms, including onboarding of applications and privileged accounts, upgrades, patching and remediation of security vulnerabilities
• Investigate incidents, perform root cause analysis and support problem resolution in complex environments
• Contribute to service improvements through automation, standardization and process optimization
• Collaborate with application owners, infrastructure teams, security functions, software vendors and support partners worldwide
• Support projects and initiatives related to cloud transformation, Zero Trust and modern identity security
• Help translate security requirements into practical and scalable technical solutions
• Contribute to the adoption of security standards, best practices and PAM solutions across the organization
• Participate in agile delivery activities, knowledge sharing and continuous improvement initiatives

• Degree in Computer Science, Cyber Security or comparable qualification
• Several years’ experience in:
• Privileged Access Management (PAM)
• Cyber Security Engineering or Operations
• Hands-on experience with Windows and Linux environments
• Strong analytical mindset and structured problem-solving approach
• Experience working in global and cross-functional teams
• Fluent English communication in an international environment

Nice-to-Have:

• Experience with PAM solutions such as CyberArk, BeyondTrust or similar platforms
• Experience with identity technologies such as Active Directory, Entra ID and MFA
• Basic scripting or automation skills (e.g., PowerShell, Python)
• Exposure to DevOps practices and CI/CD pipelines
• Familiarity with security standards and frameworks such as ISO 27001, NIST or PCI DSS

• A secure work environment because your health, safety and wellbeing is always our top priority.
• Flexible work schedule and Home-office options, so that you can balance your working life and private life.
• Learning and development opportunities
• 25 holiday days per year
• 5 additional days (readjustment)
• A collaborative, trustful and innovative work environment
• Being part of an international team and work in global projects
• Relocation assistance to Madrid provided